About: Separation kernel

Facets (new session)
Description
Metadata
Settings
- Rule:
- Inverse Functional Properties:
- "Same As":

About: Separation kernel Goto Sponge NotDistinct Permalink

An Entity of Type : yago:Whole100003553, within Data Space : dbpedia.demo.openlinksw.com associated with source document(s)
QRcode icon

http://dbpedia.demo.openlinksw.com/c/AYDhvigsbb

A separation kernel is a type of security kernel used to simulate a distributed environment. The concept was introduced by John Rushby in a 1981 paper. Rushby proposed the separation kernel as a solution to the difficulties and problems that had arisen in the development and verification of large, complex security kernels that were intended to "provide multilevel secure operation on general-purpose multi-user systems." According to Rushby, "the task of a separation kernel is to create an environment which is indistinguishable from that provided by a physically distributed system: it must appear as if each regime is a separate, isolated machine and that information can only flow from one machine to another along known external communication lines. One of the properties we must prove of a se

Attributes	Values
rdf:type	software yago:WikicatOperatingSystemKernels yago:Kernel113137010 yago:NaturalObject100019128 yago:Object100002684 yago:PhysicalEntity100001930 yago:PlantPart113086908 yago:Whole100003553
rdfs:label	Separation kernel (en)
rdfs:comment	A separation kernel is a type of security kernel used to simulate a distributed environment. The concept was introduced by John Rushby in a 1981 paper. Rushby proposed the separation kernel as a solution to the difficulties and problems that had arisen in the development and verification of large, complex security kernels that were intended to "provide multilevel secure operation on general-purpose multi-user systems." According to Rushby, "the task of a separation kernel is to create an environment which is indistinguishable from that provided by a physically distributed system: it must appear as if each regime is a separate, isolated machine and that information can only flow from one machine to another along known external communication lines. One of the properties we must prove of a se (en)
dct:subject	Operating system kernels Distributed computing
Wikipage page ID	12859776 (xsd:integer)
Wikipage revision ID	1104534091 (xsd:integer)
Link from a Wikipage to another Wikipage	Operating-system-level virtualization Kernel (computer science) Operating system kernels Chroot Common Criteria Distributed computing Wind River Systems Central processing unit John Rushby Real-time operating system Green Hills Software Aerospace manufacturer Mixed criticality PikeOS FreeBSD jail Integrity (operating system) National Security Agency SeL4 Lynx Software Technologies Multiple Independent Levels of Security LynxSecure
sameAs	Separation kernel Separation kernel Separation kernel Separation kernel
dbp:wikiPageUsesTemplate	dbt:Cleanup_bare_URLs dbt:Reflist dbt:Short_description dbt:Operating_system
has abstract	A separation kernel is a type of security kernel used to simulate a distributed environment. The concept was introduced by John Rushby in a 1981 paper. Rushby proposed the separation kernel as a solution to the difficulties and problems that had arisen in the development and verification of large, complex security kernels that were intended to "provide multilevel secure operation on general-purpose multi-user systems." According to Rushby, "the task of a separation kernel is to create an environment which is indistinguishable from that provided by a physically distributed system: it must appear as if each regime is a separate, isolated machine and that information can only flow from one machine to another along known external communication lines. One of the properties we must prove of a separation kernel, therefore, is that there are no channels for information flow between regimes other than those explicitly provided." A variant of the separation kernel, the partitioning kernel, has gained acceptance in the commercial aviation community as a way of consolidating, onto a single processor, multiple functions, perhaps of mixed criticality. Commercial real-time operating system products in this genre have been used by aircraft manufacturers for safety-critical avionics applications. In 2007 the Information Assurance Directorate of the U.S. National Security Agency (NSA) published the Separation Kernel Protection Profile (SKPP), a security requirements specification for separation kernels suitable to be used in the most hostile threat environments. The SKPP describes, in Common Criteria parlance, a class of modern products that provide the foundational properties of Rushby's conceptual separation kernel. It defines the security functional and assurance requirements for the construction and evaluation of separation kernels while yet providing some latitude in the choices available to developers. The SKPP defines separation kernel as "hardware and/or firmware and/or software mechanisms whose primary function is to establish, isolate and separate multiple partitions and control information flow between the subjects and exported resources allocated to those partitions." Further, the separation kernel's core functional requirements include: * Protection of all resources (including CPU, memory and devices) from unauthorized access. * Separation of internal resources used by the Target of Evaluation Security Functions (TSF) from exported resources made available to subjects. * Partitioning and isolation of exported resources. * Mediation of information flows between partitions and between exported resources. * Audit services. The separation kernel allocates all exported resources under its control into partitions. The partitions are isolated except for explicitly allowed information flows. The actions of a subject in one partition are isolated from (viz., cannot be detected by or communicated to) subjects in another partition, unless that flow has been allowed. The partitions and flows are defined in configuration data. Note that 'partition' and 'subject' are orthogonal abstractions. 'Partition,' as indicated by its mathematical genesis, provides for a set-theoretic grouping of system entities, whereas 'subject' allows us to reason about the individual active entities of a system. Thus, a partition (a collection, containing zero or more elements) is not a subject (an active element), but may contain zero or more subjects.The separation kernel provides to its hosted software programs high-assurance partitioning and information flow control properties that are both tamperproof and non-bypassable. These capabilities provide a configurable trusted foundation for a variety of system architectures. (en)
gold:hypernym	Kernel
prov:wasDerivedFrom	wikipedia-en:Separation_kernel?oldid=1104534091&ns=0
page length (characters) of wiki page	6642 (xsd:nonNegativeInteger)
foaf:isPrimaryTopicOf	wikipedia-en:Separation_kernel
is Link from a Wikipage to another Wikipage of	Timeline of operating systems Objective Interface Systems Embedded hypervisor PikeOS OS-level virtualization XtratuM Lynx Software Technologies Multiple Independent Levels of Security Multiple single-level Rump kernel LynxSecure
is foaf:primaryTopic of	wikipedia-en:Separation_kernel

Faceted Search & Find service v1.17_git147 as of Sep 06 2024

Alternative Linked Data Documents: ODE Content Formats:

RDF

ODATA

Microdata

About

OpenLink Virtuoso version 08.03.3331 as of Sep 2 2024, on Linux (x86_64-generic-linux-glibc212), Single-Server Edition (378 GB total memory, 55 GB memory in use)
Data on this page belongs to its respective rights holders.
Virtuoso Faceted Browser Copyright © 2009-2024 OpenLink Software